Job Description Summary:
The Senior Systems & Security Administrator is a hands-on role responsible for managing, securing, and supporting a hybrid enterprise IT environment. The position supports Windows Server and Linux/Ubuntu infrastructure, Microsoft 365, Microsoft Entra ID, Active Directory, Exchange Online, AWS, Azure, and Odoo-based business applications.
This role manages system and cloud operations, identity and access, system maintenance, patching, monitoring, backup and recovery, vulnerability remediation, Tier 2/3 support, automation, and technical documentation. The administrator independently troubleshoots complex infrastructure issues and applies least-privilege and security best practices.
Job Description:
Key Responsibilities
Systems and Infrastructure Administration
- Administer Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, file services, patching, and system lifecycle activities.
- Administer Linux and Ubuntu servers, including users and permissions, services, patching, performance monitoring, log analysis, and troubleshooting.
- Perform server provisioning, configuration, upgrades, patching, backup validation, recovery testing, and documentation.
- Monitor system availability, capacity, performance, and backup status, and proactively address issues.
Identity, Microsoft 365, and Messaging
- Administer Active Directory, Microsoft Entra ID, and Microsoft 365 identity services.
- Manage the full user lifecycle, including account provisioning, access changes, group membership, license assignment, and offboarding.
- Support hybrid identity environments, including directory synchronization and synchronization troubleshooting.
- Administer Exchange Online, including user and shared mailboxes, distribution and security groups, mailbox permissions, licensing, and mail flow.
- Manage Conditional Access, multifactor authentication, enterprise applications, single sign-on, role-based access, and privileged access.
- Conduct periodic reviews of user accounts, group memberships, licenses, and access permissions.
Cloud and Business Application Operations
- Administer AWS environments, including compute, networking, identity and access, security groups, DNS, load balancing, storage, monitoring, and database services.
- Support Azure virtual machines, identity services, networking, storage, monitoring, and security controls.
- Maintain least-privilege access, cloud identity controls, firewall rules, security configurations, and monitoring.
- Support Odoo environments, including Linux hosting, PostgreSQL connectivity, application availability, logs, backups, and troubleshooting.
- Collaborate with Odoo developers and business stakeholders on deployments, integrations, scheduled jobs, performance issues, and access requests.
- Participate in cloud migration, modernization, automation, and infrastructure improvement initiatives.
Security and Maintenance
- Maintain Windows, Linux/Ubuntu, cloud, and business application environments according to established security standards and operating procedures.
- Perform operating system, application, and security patching, coordinate maintenance windows, and validate system health after changes.
- Apply secure configuration standards and maintain appropriate administrative and least-privilege access.
- Review system, application, and cloud logs for operational issues, unauthorized access, or abnormal activity, and escalate findings when needed.
- Support vulnerability remediation through patching, configuration changes, and coordination with internal teams and vendors.
- Maintain system documentation, asset inventories, access and backup records, and technical procedures.
Support and Collaboration
- Provide Tier 2/3 support for infrastructure, cloud, identity, messaging, and Odoo platform issues.
- Collaborate with IT teams, business stakeholders, developers, vendors, and managed security service providers.
- Participate in scheduled maintenance and occasional after-hours or on-call support.
- Improve reliability, security, and operational efficiency through scripting and automation.
Qualifications
Required
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
- At least 8 years of hands-on experience in enterprise IT operations, systems administration, infrastructure operations, or a similar role.
- Strong hands-on experience with enterprise Windows Server and Linux/Ubuntu environments.
- At least 4 years of hands-on experience administering AWS environments in an enterprise setting.
- At least 4 years of hands-on experience administering Active Directory and Microsoft Entra ID.
- At least 2 years of hands-on Exchange Online administration experience, including mailboxes, shared mailboxes, groups, permissions, licensing, and mail flow.
- Experience supporting hybrid environments that connect on-premises Active Directory with Microsoft Entra ID.
- Working knowledge of Azure administration and cloud security controls.
- Understanding of Odoo architecture and operations, including application services, PostgreSQL, Linux hosting, logs, backups, and common troubleshooting methods.
- Strong troubleshooting skills across servers, authentication, email, cloud services, and business applications.
- Ability to create clear technical documentation and communicate with both technical and non-technical stakeholders.
Preferred
- Experience supporting Odoo in an enterprise environment, including deployments, PostgreSQL backup and restore, performance troubleshooting, integrations, and scheduled jobs.
- Experience with additional AWS services for load balancing, DNS, storage, monitoring, databases, containers, serverless computing, or web application security.
- Experience with endpoint management, endpoint detection and response, vulnerability management, security monitoring, or email security platforms.
- Experience with Exchange Online security, including anti-phishing, anti-spam, mail-flow rules, and email authentication standards.
- Experience with automation and infrastructure-as-code tools such as PowerShell, Bash, Python, Ansible, or Terraform.
- Experience with backup, disaster recovery, business continuity planning, and restore testing.
- Relevant AWS, Microsoft, CompTIA, or information security certifications.
- Experience supporting SSL/TLS certificates, web infrastructure, and identity federation using
Benefits
Additional Workplace Offerings (subject to change or eligibility.)
Annual Bonus Plan
Onsite Employee Fitness Center with Indoor Racquetball Court and Yoga Room
Summer Fridays
Complimentary Gourmet Breakfast, Lunch, and Dinner
Relocation Support for New Hires
Work Anniversary Recognitions
Congratulatory & Condolence Gifts
Employee Referral Bonus Program
License/Certification Reimbursements
Corporate Employee Discounts
Visa Sponsorships (100% paid by the company) i.e., New H-1B, H-1B Transfer, O-1, and Green Card
Commuter Support (Shuttle Bus Program and EZPass Support)
Vehicle Perks
Qualification(s):
Education(s):
Bachelor of Science (B.S): Computer and Information Science (Required)
Work Experience:
Experience Range IV: 8 - 13 years of relevant experience or industry exposure in a related field
Skill(s):
AWS Administration
Language(s):
English
Certification(s):
Not Applicable
The anticipated compensation range is
91,000.00 - 172,000.00 USD Annual
Actual compensation will be determined based on various factors including qualifications, education, experience, and location. The pay range is subject to change at any time dependent on a variety of internal and external factors.
Kiss Nail Products, Inc., KDC GA Corp., Ivy Enterprises, Inc., AST Systems, LLC, Red Beauty, Inc., or Dae Do, Inc. (collectively, the “Company”) is an equal opportunity employer and is committed to a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, or any other characteristic protected by law.
